Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File:                     hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier:          sOF8hZ8f20amHhEpU9nh8tglulQ/cJ6RNMdhYjHZ16E=
Subject key identifier:   51:15:AB:12:F1:01:00:D3:D4:1F:02:93:B3:EA:43:18:21:DA:79:EF
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer:       /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial:       01962DF44DC4268BAD55E451C65ACBAC261F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number:          1487
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
                          2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
                          3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
                          4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
                          5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: McDWMIIf/OB6OJyRPrlYC42iPAbICGe9DEDyXks04fI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4d:c4:26:8b:ad:55:e4:51:c6:5a:cb:ac:26:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=5115ab12f10100d3d41f0293b3ea431821da79ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:23:56:74:6b:86:91:99:34:27:a7:9f:b6:
                    b1:88:9b:df:27:85:df:26:db:7b:00:b8:af:00:23:
                    ed:ad:28:ac:86:26:f2:68:fb:1a:d9:8a:ba:f4:82:
                    0e:b1:3d:32:15:2b:35:1e:ca:ce:1b:b6:3d:a0:e0:
                    60:f6:72:5a:46:7c:40:91:e7:33:17:2d:77:22:36:
                    a5:c9:fe:16:e9:ba:4d:54:17:86:a2:f7:a4:08:84:
                    07:11:ec:cd:9d:30:16:c4:cf:78:14:d7:0c:76:9e:
                    11:aa:2b:35:65:e8:26:6d:80:b4:6e:a0:e1:23:3b:
                    b2:bd:82:ce:13:ca:07:b6:98:f7:6f:32:35:15:e8:
                    52:bd:f0:2d:af:7c:4f:9e:b4:64:81:d6:f4:fb:ee:
                    24:f5:d9:66:8f:e3:23:4c:57:0c:bf:1c:60:d2:2d:
                    5b:24:2e:83:fd:e5:b8:3d:a7:b1:00:5d:bc:c1:4c:
                    19:f8:44:db:28:34:12:9c:56:05:12:f9:57:98:fe:
                    6e:f0:53:aa:9e:11:4a:07:eb:7d:4f:fb:61:ca:79:
                    1b:ee:d0:3f:ef:7d:c2:4b:6d:a1:8e:22:13:b3:46:
                    12:30:39:10:56:ac:43:7c:37:74:73:ce:7e:f5:d3:
                    ce:bb:e4:ca:40:7a:45:f6:19:93:49:24:c5:8e:c6:
                    84:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:15:AB:12:F1:01:00:D3:D4:1F:02:93:B3:EA:43:18:21:DA:79:EF
            X509v3 Authority Key Identifier:
                keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:9a:19:5c:eb:54:59:a4:e8:82:dd:e5:8b:b4:7a:e0:fe:fe:
         10:40:db:2f:e2:8a:ff:90:04:a1:e5:54:60:72:de:79:95:00:
         a8:3e:de:88:92:c9:f3:14:05:07:d7:d1:98:63:9c:cb:8c:65:
         3e:35:02:6d:04:2f:96:b1:53:20:e7:ea:7e:fb:66:6a:a8:9e:
         ff:9a:3e:70:09:19:14:5c:76:12:dc:5e:d2:86:d7:13:b6:54:
         94:8f:14:76:c9:0b:99:a0:f5:f9:55:fb:2f:42:88:dd:ed:99:
         98:e3:63:90:db:db:f4:d9:87:9f:b2:f9:08:05:84:6e:4f:2c:
         d6:57:fd:25:15:24:e2:67:ee:c5:2d:be:2d:a2:03:87:fd:eb:
         9c:26:e9:89:1a:64:96:86:c8:45:56:71:a1:4c:81:94:24:03:
         f7:32:19:0a:3c:f8:73:c3:d9:5c:21:93:09:a2:b7:2e:01:1a:
         87:12:74:b8:b1:6f:6f:73:94:aa:8e:11:ec:0d:8d:69:97:23:
         9b:e7:96:66:dc:5e:49:2c:a4:47:00:58:f2:d4:6e:fe:09:06:
         21:61:63:eb:3d:5f:d6:1d:53:27:fa:59:5f:0e:4a:5b:80:77:
         c5:06:f4:30:80:32:ab:d7:af:55:89:90:59:85:6b:a5:54:3c:
         47:ee:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----